Remove old method of updating email_access_validated_at

Previously we were passing a flag to the API which handled this. Now
we are doing it at the time of clicking the link, not at the time of
storing the new password. We don’t need to update the timestamp twice,
so this commit removes the code which tells the API to do it.

tests/app/main/views/test_new_password.py

@@ -156,6 +156,6 @@ def test_should_sign_in_when_password_reset_is_successful_for_email_auth(
 
     # the log-in flow makes a couple of calls
     mock_get_user.assert_called_once_with(user['id'])
-    mock_update_user_password.assert_called_once_with(user['id'], 'a-new_password', validated_email_access=True)
+    mock_update_user_password.assert_called_once_with(user['id'], 'a-new_password')
 
     assert not mock_send_verify_code.called

tests/app/main/views/test_two_factor.py

@@ -234,7 +234,7 @@ def test_two_factor_sms_should_set_password_when_new_password_exists_in_session(
     assert response.location == url_for('main.show_accounts_or_dashboard', _external=True)
 
     mock_update_user_password.assert_called_once_with(
-        api_user_active['id'], 'changedpassword', validated_email_access=True
+        api_user_active['id'], 'changedpassword',
     )